Figma

Professional Figma design analysis and asset export. Use for extracting design data, exporting assets in multiple formats, auditing accessibility compliance, analyzing design systems, and generating comprehensive design documentation. Read-only analysis of Figma files with powerful export and reporting capabilities.

Install only in a workspace where exported Figma assets and reports are acceptable to write. Store the Figma token as a secret, keep .env files out of source control, rotate the token if exposed, and prefer a dedicated output directory to avoid overwriting local files.

Type: OpenClaw Skill Name: figma Version: 2.1.0 The OpenClaw AgentSkills skill bundle for Figma is benign. All Python scripts (`figma_client.py`, `export_manager.py`, `accessibility_checker.py`, `style_auditor.py`) are focused on interacting with the Figma API for read-only operations like data extraction, asset export, and design auditing, as explicitly stated in `SKILL.md`. Authentication is handled securely via `FIGMA_ACCESS_TOKEN` environment variable. Network calls are exclusively directed to `api.figma.com` or Figma's CDN, and file system operations are limited to writing exported assets and reports to user-specified directories, with filename sanitization in place. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, obfuscation, or prompt injection attempts in the `SKILL.md` or any other files.